$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft File: v49Do1Dk9qJgvwPtS9_BqB2itaE.mft (raw, json) Hash identifier: ObNAJ1fyqKpAG3TI0a0OHawxFFmTIji6t7b8OQ7WLco= Subject key identifier: 45:3F:8B:B2:C3:01:61:3B:B5:43:EB:61:BA:CB:E8:84:D2:06:0E:94 Authority key identifier: BF:8F:43:A3:50:E4:F6:A2:60:BF:03:ED:4B:DF:C1:A8:1D:A2:B5:A1 Certificate issuer: /CN=A91FAB62/serialNumber=BF8F43A350E4F6A260BF03ED4BDFC1A81DA2B5A1 Certificate serial: 0664 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v49Do1Dk9qJgvwPtS9_BqB2itaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft Manifest number: 0645 Signing time: Thu 24 Apr 2025 22:35:06 +0000 Manifest this update: Thu 24 Apr 2025 22:35:05 +0000 Manifest next update: Thu 01 May 2025 22:35:05 +0000 Files and hashes: 1: v49Do1Dk9qJgvwPtS9_BqB2itaE.crl (hash: 5mrYanmHmw3o0k+qOYSMFeFaocILloEncMkJ4DLShTg=) 2: 606DB4B298D111EB84F5A23CC4F9AE02.roa (hash: d5GPHUQ6PbzbALE1pusneP0He2eAPmJTteAnoAOf/Gs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.crl rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v49Do1Dk9qJgvwPtS9_BqB2itaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:35:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1636 (0x664) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAB62, serialNumber=BF8F43A350E4F6A260BF03ED4BDFC1A81DA2B5A1 Validity Not Before: Apr 24 22:35:05 2025 GMT Not After : May 1 22:35:05 2025 GMT Subject: CN=680abc99-aef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1a:30:38:dc:90:90:36:d3:85:83:ce:88:73: 04:1b:62:1d:52:31:23:7a:0e:fb:60:13:dc:9b:8e: 6b:5e:8f:b6:c6:8a:73:40:5d:95:b6:28:11:6a:26: 2b:da:6c:57:74:74:0b:e9:31:b9:26:c3:23:eb:fd: f1:e5:6f:ba:44:05:0b:cd:50:4a:2e:be:70:a6:eb: 55:7f:ab:e5:6b:e8:be:12:e6:5b:c3:7c:61:83:41: e4:a6:39:5c:c3:76:b4:ca:0b:90:98:b5:7d:19:6c: de:ee:3f:e1:20:e8:c4:c1:a0:79:dd:6b:03:ac:ff: 66:95:64:92:d9:ff:fd:97:3c:31:c8:2f:d2:72:23: 2e:7c:95:7f:85:00:5b:49:5a:6b:2d:a6:5d:fd:ed: 0d:55:1b:4f:ea:f8:f0:9d:5e:df:c3:d9:57:55:c1: 9d:07:b4:70:43:f6:a7:27:f2:1b:cc:a5:d5:52:cd: c3:ae:e2:fc:d8:47:78:34:09:22:92:33:f3:0c:3c: a6:af:98:7b:af:88:e5:2a:5c:7c:43:91:ed:f3:42: 3f:e7:21:e0:ac:bc:1b:16:67:07:c0:44:39:65:a9: 71:1c:e8:28:80:64:e5:0d:da:ae:ed:aa:10:62:5f: 20:d7:4a:9a:c5:98:8b:6d:da:56:75:38:e9:e8:ea: 59:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:3F:8B:B2:C3:01:61:3B:B5:43:EB:61:BA:CB:E8:84:D2:06:0E:94 X509v3 Authority Key Identifier: keyid:BF:8F:43:A3:50:E4:F6:A2:60:BF:03:ED:4B:DF:C1:A8:1D:A2:B5:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v49Do1Dk9qJgvwPtS9_BqB2itaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:b4:25:b9:e9:6a:2d:38:c9:3f:03:e0:74:35:6e:85:45:c7: 8c:93:ec:46:d2:f3:f7:f8:7c:b9:01:ef:24:da:97:14:b1:de: 42:8e:04:79:78:f7:67:72:70:ec:c9:19:4b:c1:b7:3c:83:c2: e0:53:1d:6f:13:27:68:2a:d1:d5:62:71:ff:b0:66:20:be:47: 2c:8a:7c:f4:66:5e:cc:f3:96:0f:9e:07:fd:e0:08:ab:03:6d: 37:12:0a:c9:77:e0:0c:de:27:24:45:87:9f:73:df:af:93:e1: ac:9c:d0:ad:8e:c9:4e:ba:55:68:08:e5:d6:d2:32:6c:8e:3b: 6a:b0:0a:d6:46:a2:84:30:bb:34:40:b9:5d:b5:93:16:d3:ae: b2:03:d8:96:e2:1f:3f:c1:94:73:6c:90:97:a1:53:a5:e3:a2: dc:86:2f:53:0f:39:e2:0d:b9:a6:75:6a:24:51:0c:fc:10:d0: af:9f:1a:d8:c4:93:44:3a:9a:1d:af:51:8a:6e:2a:29:c2:63: e8:82:55:42:c2:09:6a:ba:ce:6b:d2:ab:fb:c1:23:50:95:de: 6a:d1:1f:fd:f3:25:73:ed:b4:67:bf:f3:92:b5:3d:0a:b5:35: ae:14:e9:0e:c3:8a:e2:73:9f:bd:4c:ee:5c:3f:62:cc:49:2c: 9a:89:03:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFCNjIxMTAvBgNVBAUTKEJGOEY0M0EzNTBFNEY2QTI2MEJGMDNFRDRCREZDMUE4 MURBMkI1QTEwHhcNMjUwNDI0MjIzNTA1WhcNMjUwNTAxMjIzNTA1WjAYMRYwFAYD VQQDEw02ODBhYmM5OS1hZWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhowONyQkDbThYPOiHMEG2IdUjEjeg77YBPcm45rXo+2xopzQF2VtigRaiYr 2mxXdHQL6TG5JsMj6/3x5W+6RAULzVBKLr5wputVf6vla+i+EuZbw3xhg0Hkpjlc w3a0yguQmLV9GWze7j/hIOjEwaB53WsDrP9mlWSS2f/9lzwxyC/SciMufJV/hQBb SVprLaZd/e0NVRtP6vjwnV7fw9lXVcGdB7RwQ/anJ/IbzKXVUs3DruL82Ed4NAki kjPzDDymr5h7r4jlKlx8Q5Ht80I/5yHgrLwbFmcHwEQ5ZalxHOgogGTlDdqu7aoQ Yl8g10qaxZiLbdpWdTjp6OpZBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEU/i7LD AWE7tUPrYbrL6ITSBg6UMB8GA1UdIwQYMBaAFL+PQ6NQ5PaiYL8D7UvfwagdorWh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUI2Mi84MkU5M0YyQzk4 Q0YxMUVCQjc1NzJBM0FDNEY5QUUwMi92NDlEbzFEazlxSmd2d1B0UzlfQnFCMml0 YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Y0OURvMURrOXFKZ3Z3UHRTOV9CcUIyaXRhRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUI2Mi84MkU5M0YyQzk4Q0YxMUVCQjc1NzJBM0FDNEY5QUUwMi92NDlEbzFEazlx Smd2d1B0UzlfQnFCMml0YUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdtCW56WotOMk/A+B0NW6FRceMk+xG0vP3+Hy5Ae8k2pcUsd5CjgR5 ePdncnDsyRlLwbc8g8LgUx1vEydoKtHVYnH/sGYgvkcsinz0Zl7M85YPngf94Air A203EgrJd+AM3ickRYefc9+vk+GsnNCtjslOulVoCOXW0jJsjjtqsArWRqKEMLs0 QLldtZMW066yA9iW4h8/wZRzbJCXoVOl46Lchi9TDzniDbmmdWokUQz8ENCvnxrY xJNEOpodr1GKbiopwmPoglVCwglqus5r0qv7wSNQld5q0R/98yVz7bRnv/OStT0K tTWuFOkOw4ric5+9TO5cP2LMSSyaiQNK -----END CERTIFICATE-----Generated at Sat Apr 26 17:22:48 2025 by rpki-client